cURL

curl -X PATCH "https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility" \
  -H "Authorization: Bearer <access_token>" \
  -H "Idempotency-Key: <stable_request_key>" \
  -H "Content-Type: application/json" \
  -d '{}'

const options = {
  method: 'PATCH',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({clientId: '67f1234567890abcdef9999'})
};

fetch('https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility"

payload = { "clientId": "67f1234567890abcdef9999" }
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "clientId": "67f1234567890abcdef1234",
    "trainingSectionsAccess": {
      "pageEnabled": true,
      "trainingPlanAssignedSection": true,
      "freestyleWorkout": true,
      "videoLibrary": true,
      "performanceSummary": true,
      "muscleActivation": true,
      "dailyTrainingNotes": false,
      "workoutPlanLibrary": true
    }
  },
  "meta": {
    "requestId": "4f849d7d-f4f1-45cc-b4b7-3984a3d17f83",
    "rateLimit": {
      "limit": 10,
      "remaining": 9,
      "resetSeconds": 1
    },
    "idempotency": {
      "replayed": false
    }
  }
}

Settings

Update a client's training-section visibility toggles

Coach-only. Partially updates the trainingSectionsAccess flags for a specific client. Only the keys present in the request body are changed — omitted keys remain unchanged. All provided section values must be boolean. The client is verified to belong to the coach’s company via connectedCompanies.

Requires the workout_settings:write scope. This operation maps to /app/v1/workout/plans/training-sections-visibility and retains its Workout V2 permission, feature-flag, and resource-scope checks.

The clientId path parameter is resolved inside the company bound to the Public API token when present.

PATCH

/

public

/

v1

/

workout

/

plans

/

training-sections-visibility

cURL

curl -X PATCH "https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility" \
  -H "Authorization: Bearer <access_token>" \
  -H "Idempotency-Key: <stable_request_key>" \
  -H "Content-Type: application/json" \
  -d '{}'

const options = {
  method: 'PATCH',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({clientId: '67f1234567890abcdef9999'})
};

fetch('https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.fitsociety.io/public/v1/workout/plans/training-sections-visibility"

payload = { "clientId": "67f1234567890abcdef9999" }
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "clientId": "67f1234567890abcdef1234",
    "trainingSectionsAccess": {
      "pageEnabled": true,
      "trainingPlanAssignedSection": true,
      "freestyleWorkout": true,
      "videoLibrary": true,
      "performanceSummary": true,
      "muscleActivation": true,
      "dailyTrainingNotes": false,
      "workoutPlanLibrary": true
    }
  },
  "meta": {
    "requestId": "4f849d7d-f4f1-45cc-b4b7-3984a3d17f83",
    "rateLimit": {
      "limit": 10,
      "remaining": 9,
      "resetSeconds": 1
    },
    "idempotency": {
      "replayed": false
    }
  }
}

Authorizations

Authorization

string

header

required

Public API access token issued by /public/v1/oauth/token. Example: Authorization: Bearer fspt_.... Each resource request rechecks the token company's current provider access. Disabling access blocks existing tokens with 403 auth.provider_unavailable.

Headers

Idempotency-Key

string

required

Required for Public API write requests. Reusing the same key with the same method, path, and body replays the stored successful response; reusing it with a different request returns 409 idempotency.conflict.

Required string length: 1 - 200

Example:

"booking-create-20260714-001"

Body

application/json

clientId

string

required

The client whose settings are being updated.

Example:

"67f1234567890abcdef1234"

pageEnabled

boolean

Master toggle — disables the entire training page when false.

Example:

true

trainingPlanAssignedSection

boolean

Assigned Plans section (Training Plans group).

Example:

true

freestyleWorkout

boolean

Freestyle Workout section (Workout Tools group).

Example:

true

videoLibrary

boolean

Video Library section (Workout Tools group).

Example:

true

performanceSummary

boolean

Performance Summary section (Analytics & Data group).

Example:

true

muscleActivation

boolean

Muscle Activation Map section (Analytics & Data group).

Example:

true

dailyTrainingNotes

boolean

Daily Notes section (Analytics & Data group).

Example:

true

workoutPlanLibrary

boolean

Training Plan Library section (Library group).

Example:

true

Response

Updated training-section access settings returned in full.

data

object

required

Show child attributes

meta

object

required

Show child attributes